3 commits

Author	SHA1	Message	Date
Daniel	1ce3eec7cb	feat: authorize tutor context and protect uploaded media ... Tutor questions require owned selected attempts; similarity context filters eligibility before ranking. Uploads move to a permission-aware boundary with reference ACLs, canonical legacy aliases, pre-mutation attachment checks and card-aware moderator rules. Nginx stops caching media and supplies native byte ranges. Verified 37 deployed-image backend tests, 69 frontend tests/build, real pgvector/Nginx/browser checks, and two independent reviews.	2026-09-07 15:04:00 +02:00
Daniel	c605178cbc	docs: record accepted quiz runner review	2026-09-07 04:22:03 +02:00
Daniel	a3a6ef7995	feat: redesign quiz runner and add study tools ... Add Orthobullets-inspired numbered-answer UI, explicit study response confirmation, response statistics, review navigation, safe calculator, keyboard controls and sourced educator lab references. Persist attempt mode to prevent query-flag exam disclosure. Combined deployed-image backend suite (22), frontend suite (48), build and synthetic desktop/mobile browser checks pass. PostgreSQL round-trip and independent review remain release gates; no production deployment.	2026-09-07 03:10:23 +02:00